e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28

General

Target
e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28
Size 193KB
Sample221112-ewtm9sdf43
SHA256 e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28
MD5 39aed80fd34ae8027d60f28192456d4f
SHA1 d85a11eb3f720a7220704f256ab5bb030af6800c
SHA512 f2ec37b3e2f6315542a0e93653e44b84ef010cd57f81a8e7d509546f2d45ef3d9dee6f18bcef998032e2e0a15c0f6b386c4ce71f276bcb0da94a159d24eabc61
SSDEEP 3072:EBLXVGr7l3pxdhLBEhG+9dgeR5fJC18LJWKWdUZJDA0ONQbto961Mz:EVV8l3XLBEhG+9ddfoKWdwONQbtoaM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28

.exe 193KB

e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28

IMPHASH b3624c9de84346baaf052b30f634ca89
SHA256 e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28
MD5 39aed80fd34ae8027d60f28192456d4f
SHA1 d85a11eb3f720a7220704f256ab5bb030af6800c
SHA512 f2ec37b3e2f6315542a0e93653e44b84ef010cd57f81a8e7d509546f2d45ef3d9dee6f18bcef998032e2e0a15c0f6b386c4ce71f276bcb0da94a159d24eabc61
SSDEEP 3072:EBLXVGr7l3pxdhLBEhG+9dgeR5fJC18LJWKWdUZJDA0ONQbto961Mz:EVV8l3XLBEhG+9ddfoKWdwONQbtoaM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37670

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileA TlsGetValue CopyFileExA MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoW QueryDosDeviceW LocalAlloc DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW CopyFileW OpenWaitableTimerW LocalReAlloc FindResourceA OpenEventA SearchPathA RequestWakeupLatency CallNamedPipeW GetProcAddress LoadLibraryA GlobalAlloc SetFileTime GetVolumeNameForVolumeMountPointA GetVolumePathNameW FatalAppExitA TerminateThread GetSystemWindowsDirectoryA MoveFileA ResetWriteWatch GetMailslotInfo GetConsoleAliasA SetThreadUILanguage GetDiskFreeSpaceExA DefineDosDeviceA GetOEMCP SetProcessAffinityMask GlobalFindAtomW MoveFileWithProgressW InterlockedIncrement InterlockedExchangeAdd GetCalendarInfoA ZombifyActCtx InitializeCriticalSection FindNextVolumeW InterlockedDecrement GetModuleHandleW LeaveCriticalSection GetComputerNameW MoveFileW SetConsoleTitleA GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA EnumCalendarInfoW GetNamedPipeHandleStateW AreFileApisANSI InterlockedExchange GetTickCount AddAtomW Sleep DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc GetLastError DeleteFileA GetStartupInfoW HeapFree TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode VirtualFree HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer LCMapStringA LCMapStringW CreateFileA CloseHandle FlushFileBuffers ReadFile

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

e5bccb32464b0bbcf871f4b04c8c5152c8d9384893c19fd45c1798fed936bc28

kernel32

user32